go-httpserver/policy_test.go at main · tdrn-org/go-httpserver · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
//
// Copyright (C) 2025-2026 Holger de Carne
//
// This software may be modified and distributed under the terms
// of the MIT license. See the LICENSE file for details.

package httpserver_test

import (
	"net/http"
	"testing"

	"github.com/stretchr/testify/require"
	"github.com/tdrn-org/go-httpserver"
)

var loNetworks []string = []string{"127.0.0.1/32", "::1/128"}

func TestParseNetworksSuccess(t *testing.T) {
	networks, err := httpserver.ParseNetworks(loNetworks...)
	require.NoError(t, err)
	require.Len(t, networks, 2)
}

func TestParseNetworksFailure(t *testing.T) {
	networks, err := httpserver.ParseNetworks("127.0.0.1")
	require.Error(t, err)
	require.Nil(t, networks)
}

func TestAllowedNetworksPolicyForbidden(t *testing.T) {
	networks, err := httpserver.ParseNetworks(remoteIP1234.String() + "/32")
	require.NoError(t, err)
	allowedNetworksPolicy := httpserver.AllowNetworks("", networks)
	options := []httpserver.OptionSetter{
		httpserver.WithDefaultAccessLog(),
		httpserver.WithAllowedNetworksPolicy(allowedNetworksPolicy),
	}
	runServerTest(t, func(t *testing.T, server *httpserver.Instance) {
		statusCode, err := server.Ping()
		require.NoError(t, err)
		require.Equal(t, http.StatusForbidden, statusCode)
	}, options...)
}

func TestAllowedNetworksPolicyOK(t *testing.T) {
	networks, err := httpserver.ParseNetworks(loNetworks...)
	require.NoError(t, err)
	allowedNetworksPolicy := httpserver.AllowNetworks("", networks)
	options := []httpserver.OptionSetter{
		httpserver.WithDefaultAccessLog(),
		httpserver.WithAllowedNetworksPolicy(allowedNetworksPolicy),
	}
	runServerTest(t, func(t *testing.T, server *httpserver.Instance) {
		statusCode, err := server.Ping()
		require.NoError(t, err)
		require.Equal(t, http.StatusOK, statusCode)
	}, options...)
}